833c11ca6763a8b03596568b58d8fa7fa680157b8fc8d23b197d935b03b03baa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

833c11ca6763a8b03596568b58d8fa7fa680157b8fc8d23b197d935b03b03baa
Size

802KB
Sample

221107-n68dvaeff8
MD5

0602babfc893b4fc38969db80f71c785
SHA1

a19bb27a87bd84b08eb5deb2465e2f80e4ff9c79
SHA256

833c11ca6763a8b03596568b58d8fa7fa680157b8fc8d23b197d935b03b03baa
SHA512

3221eadaa5880f5f3b0791fd7e448e7babaa94d69d416f47d86269576375ad0cc2302088b7449f905850dc9221cca8c249712cf973c00f79f82a9ce273ac4d95
SSDEEP

12288:NystWYERqCNmGcOD1nbeVMBgvoAmsWIlajb70/iWUwlEjlZZ73tQwGPbf:blEd+wb+jmsVU7CxllyZZ7ar

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  833c11ca6763a8b03596568b58d8fa7fa680157b8fc8d23b197d935b03b03baa
- Size
  
  802KB
- MD5
  
  0602babfc893b4fc38969db80f71c785
- SHA1
  
  a19bb27a87bd84b08eb5deb2465e2f80e4ff9c79
- SHA256
  
  833c11ca6763a8b03596568b58d8fa7fa680157b8fc8d23b197d935b03b03baa
- SHA512
  
  3221eadaa5880f5f3b0791fd7e448e7babaa94d69d416f47d86269576375ad0cc2302088b7449f905850dc9221cca8c249712cf973c00f79f82a9ce273ac4d95
- SSDEEP
  
  12288:NystWYERqCNmGcOD1nbeVMBgvoAmsWIlajb70/iWUwlEjlZZ73tQwGPbf:blEd+wb+jmsVU7CxllyZZ7ar
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2